Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SuLFJ04hCeI9I6Sb8-hwG2x4w5Y.roa
File: SuLFJ04hCeI9I6Sb8-hwG2x4w5Y.roa (raw, json)
Hash identifier: f74GFiPMQb1/A6S3SXKIZpQepDcRKKs7pb3GLH84LuY=
Subject key identifier: 4A:E2:C5:27:4E:21:09:E2:3D:23:A4:9B:F3:E8:70:1B:6C:78:C3:96
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368BF770BE50B1323E9C9677745BA49
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SuLFJ04hCeI9I6Sb8-hwG2x4w5Y.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 82.152.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:77:0b:e5:0b:13:23:e9:c9:67:77:45:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae2c5274e2109e23d23a49bf3e8701b6c78c396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:71:28:81:82:2a:21:61:93:fb:bd:5a:60:14:
1b:b4:d0:34:ce:b4:cc:fd:94:08:69:f0:c1:54:8f:
b7:95:cc:6f:64:57:13:05:de:77:73:55:2c:5b:2c:
7d:22:c7:27:39:89:1f:27:8b:ca:6e:34:77:82:63:
b2:4f:75:3d:09:aa:b7:60:b1:95:c4:14:4a:c1:0e:
25:3d:2e:39:53:bf:90:bb:1a:a0:21:40:02:e7:72:
e5:25:64:8d:69:e4:d2:2b:7a:18:01:2a:57:51:ae:
00:ce:95:14:f3:0f:21:c2:9d:78:89:d9:18:64:44:
5f:0e:31:79:4b:03:6d:e7:be:b7:1f:b5:40:9b:5b:
32:bc:31:bb:6f:14:4c:3a:58:f2:ad:79:aa:9c:06:
46:87:a7:c0:52:61:a6:9e:04:99:c3:3a:09:60:60:
34:a2:22:06:f7:61:30:e1:fd:a9:85:14:74:95:d1:
cc:29:ce:b7:38:9e:48:9b:f7:8d:44:e6:f9:bc:d6:
fc:8c:77:4d:39:9e:1b:81:92:a3:6a:b5:46:9d:62:
ee:93:63:b2:3c:5c:1a:ec:bf:90:a7:cc:c4:3e:83:
32:c3:ff:33:94:24:5b:c2:f3:07:53:5b:55:10:ee:
1c:09:29:4f:dd:e2:96:47:27:0b:97:8e:0d:ff:9c:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:C5:27:4E:21:09:E2:3D:23:A4:9B:F3:E8:70:1B:6C:78:C3:96
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SuLFJ04hCeI9I6Sb8-hwG2x4w5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.194.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8e:e4:ee:f8:5c:be:32:25:c6:3a:08:7d:69:db:2c:57:1c:
b1:aa:5b:9f:ce:d5:6f:12:ce:10:e4:24:46:86:78:d0:f8:ab:
a3:d9:ac:85:e9:61:ac:7c:7a:c2:2f:a4:90:5e:d1:48:da:19:
a4:72:88:0c:ab:e0:02:bc:2f:b7:f3:12:fa:56:61:9d:2b:a2:
c5:85:14:da:a9:0a:ed:ef:19:3a:62:df:e9:a9:1c:07:64:aa:
15:0a:82:76:23:49:17:6f:2d:7b:0d:f6:64:6b:70:ea:c1:80:
04:71:63:cc:2e:55:0c:2d:37:f7:43:a4:b8:f4:2a:e6:82:55:
31:83:e0:c1:d3:2a:26:4c:a7:f0:8d:5a:0f:5f:91:49:cf:3e:
f7:cf:03:9e:d6:07:a9:a7:61:c6:6a:04:73:82:4a:4c:21:88:
a9:1d:d4:39:3c:6d:a4:2e:5a:bc:6f:d3:b8:ae:97:ac:8f:39:
3c:e6:4b:cf:20:4c:b3:8b:52:e9:27:fe:22:71:1a:15:6c:17:
2d:10:c1:d8:03:f0:5c:c2:2a:f2:04:50:cc:1d:c4:3e:13:b2:
26:7c:70:81:21:af:72:97:8d:28:47:02:25:9e:29:b1:79:e7:
fb:f0:7f:35:10:f8:c0:eb:c7:17:27:23:10:9f:45:f8:75:3c:
60:04:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:59 2026 by rpki-client